bdb15964aa324a510a065a32170f6962 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bdb15964aa324a510a065a32170f6962
Size

20KB
MD5

bdb15964aa324a510a065a32170f6962
SHA1

3f0289e7488112d51818fd154119895e29e057c2
SHA256

ba6738906b5add8e3a63679d9036d9bb29682c1de7283b746ae4659fe78e7b60
SHA512

67d1352dd691df577ded243f9c2068c015e34a23e08e09ddb3ce6c3f0b9df8d83bf3999e4b47d8b2e3c6dfdbcb24d21b9c687903d44b2c4b4b5eff80fb6bfb40
SSDEEP

384:X2LtozMGM9R1qhltXLI5+OpzGtwLHCnKv3TNRd2v:X2cMGM9Yt7IYyz4wysZRd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bdb15964aa324a510a065a32170f6962

Files

bdb15964aa324a510a065a32170f6962
.exe windows:1 windows x86 arch:x86

e0c043cfd771dd7838ea6d730aee107b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

GdiStartDocEMF
GetDeviceCaps
FloodFill
PathToRegion
PtInRegion
RectInRegion
PolyPatBlt
GetTextColor
GetPixelFormat

user32

ChangeMenuW
CopyImage
CallMsgFilterW
CreateMenu

shell32

RealShellExecuteExW
StrChrA
Control_RunDLLW
SHEmptyRecycleBinA
SHFileOperation
SHFileOperation
SHGetDesktopFolder

Sections

��t
Size: - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE